Lucene search
+L

9 matches found

Cvelist
Cvelist
added 2026/06/23 6:11 p.m.50 views

CVE-2026-54320 Daytona: Cross-tenant organization takeover via invitation acceptance with an unverified email

Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.184.0, organization invitations could be accepted and declined by a user whose email matched the invitation but had not been verified. Daytona authenticates users via OIDC and...

8.4CVSS0.00352EPSS
SaveExploits0References1
Rows per page
Query Builder